The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1749 advisory.

  - libxml2: Crash (stack frame overflow or NULL pointer dereference) by traversal of XPath axis     (CVE-2010-4008)

  - libxml2: double-free in XPath processing code (CVE-2010-4494)

  - libxml2: Off-by-one error leading to heap-based buffer overflow in encoding (CVE-2011-0216)

  - libxml, libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging     nodesets (CVE-2011-1944)

  - libxml2: double free caused by malformed XPath expression in XSLT (CVE-2011-2821)

  - libxml2: double-free caused by malformed XPath expression in XSLT (CVE-2011-2834)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : libxml2 (RHSA-2011:1749)

critical Nessus Plugin ID 57022

Version 1.25